limit property

List<String> limit
getter/setter pair

Limit narrows what the minted key may reach, as kind:name entries: model:zen5, project:acme, product:commerce, or model:* for a whole kind. It only ever NARROWS — a key can never reach further than the person who minted it — so an unrecognised kind costs availability, never privilege. Omitted mints an unrestricted key, because that is what every key in the estate is today and a default that restricted would revoke all of them. Example: {"type": "secret", "limit": \"model:zen5\", \"project:acme\"}

Implementation

List<String> limit;